Consider risks that exist in a typical small business. How would you determine what to examine, what data to use in that examination, and the risk appetite? Provide an example of the process you would use to determine your risk appetite for a specific risk.